Delegated Authentication

How do you know if an application is using Delegated Authentication (AuthN):

  • OIDC
  • SAML
  • Etc.

Simple ☝️

Ask yourself this:

WHO am I presenting my login credentials 🔑 to?

The application itself OR an Identity Service Provider (IdP)?

Examples of an IdP: Google, Facebook, Apple, Okta, etc.


Another hint it’s Delegated AuthN:

Your web browser (User Agent) gets redirected to an IdP for authentication..

THEN, the web browser gets redirected back to the original application.

Leave a comment